Introduction When you switch your Drupal site to HTTPS whether via Apache, NGINX you expect Drupal to recognise it's running securely. But then you notice something off: Internal links are still rendered as http://. $request->isSecure() returns false. Redirects start looping or downgrading to HTTP. You see Mixed Content...
We were trying to implement SSL-based login and registration (i.e. HTTPS) in an e-commerce web application which was otherwise using the non-secure protocol (i.e. HTTP) for the entire website. Instead of moving the entire web application to SSL, which would have increased response times, we thought it would be best if only the...